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l- REAL PARTY KN IN1BRES1 

The real party in interest is THE DIRECTV GROUP, INC., the assignee of the present 
application. 

II. RELATED ftPPKALS and tnterperences 

There are no related appeals or interferences for the above-referenced patent application. 

Til. STATUS OF CLAIMS 

Claims 1-10, 12-13, 15, 17-25, 27-28, 30-40, 42-43, 45, 47-55, and 57-58 remain in the 
application. 

Claims 1 1, 14, 16, 26, 29, 41, 44, 46, 56, and 59 have been cancelled. 

Claims 1-10, 15, 17-25, 30-40, 45, and 47-55 have been allowed. 

Claims 12, 13, 27, 28, 42, 43, 57, and 58 stand rejected. 

The rejection of claims 12, 13, 27, 28, 42, 43, 57, and 58 are being appealed. 

IV. STA TUS OF AMENDMENTS 

Claims 1,15, 30, and 45 were amended and claims 14, 29, 44, and 59 were cancelled 
subnequent to the final Office Action. 

Pursuant to the Advisory Action dated October 27, 2006, all of the amendments were 
entered into the record. 

V. SUMMARY OF CLAIMED SUBJECT MATTER 

Independent claims 1, 15, 30, and 45 are generally directed to the use of a CAM/ smart card 
to prevent unauthorized access to digital services (see paragraph [0005}-page 1, lines 9-22). 

A control center (102) is configured to coordinate and provide digital services (see paragraph 
10028] -page 5, lines 19-26 and FIG. 1). An uplink center 104 is configured to receive the digital 
services from the control center 102 and transmit the digital services to a satellite 108 (see paragraph 
[0028]-[0029] - page 5, line 19 to page 6, line 5; and FIG. 1). The satellite 108 is configured to receive 
the digital services from the uplink center 104, process the digital services, and transmit the digital 
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services and configuration information for accessing die digital services to a subscriber receiver station 
110 (see paragraph [00291 -page 5, line 27-page 6, line 5; FIG. 1). 

The subscriber receiver station 1 10 is configured to receive the digital services and 
configuration information from the satellite 108 and control access to the digital services through an 
integrated receiver/ decoder (IRD) 126 (see paragraph [0030]-[0031]- page 6, lines 6-16). 

A conditional access module (CAM) 512 is communicatively coupled to die (IRD) 126 (see 
FIG. 5 and paragraph [0030]- page 6, lines 6-11). The CAM 512 is configured to receive the 
configuration information that been transmitted asynchronously (see paragraph [0071]- page 17, lines 6- 
18; FTGs. 5 and 7). 

The CAM 512 contains a custom logic block 610 chac is configured to dynamically reconfigure a 
hardware state machine in the CAM 512 based on the configuration information (see paragraphs 
|0005J-pagc 5, lines 19-22, [00l5]-page 4, lines M4, [0027]-page 5, lines 12-16, [0067]-page 16, lines 3- 
13, (0073)-page 18, lines 1-15, [0074]-page 18, lines 16-24, [0078]-page 19, lines 14-24, [0080J-page 20, 
lines 5-t 1 , [00821-page 20, line 22-page 21 , line 5; FIGs. 5, 6, 7). The hardware state machine comprises 
custom logic 610 chat is used to control access to the digital services (see paragraph [0Q66]~page 15, line 
21 -page 16, line 2, (0069]-page 16, lines 21-25; and FIG, 7), Further, the hardware state machine is not 
direcdy accessible to a system input/output module 608 or system bus 612 of the CAM 512 (see 
paragraph [00151-page 4, fines 5-14, [0078J-page 19, lines 14-24; FIGS. 7 and 8), In addition, the 
custom logic block 610 comprises a dedicated hardware reconfiguration and input/output module 714 
thar connects the hardware state machine to a system bus 612 of the CAM 512 and controls access to 
logic of the hardware state machine (see paragraph [0069]-page 16, lines 21 -25 and FIG. 7). 

Thus, as claimed, since the hardware state rnachine is not accessible to the system 
input/ output module or system bus of the CAM/smart card, and because the implementation is 
hardware based, ir is protected from being altered by the microprocessor of the CAM/smart card or 
external means. 

Dependent claim 12, 27, 42, and 57 provides that the custom logic block 610 comprises an 
asynchronous dynamic pre-permutation module that employs a series of one or more configurable 
multiplexors and the beginning of the hardware state machine 71 8 (see paragraphs [0070]-[0074} - 
page 16, line 26-page 18, line 24; FIG, 7). 
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Dependent claims 13, 28, 43, and 58 provide that the custom logic block comprises an 
asynchronous dynamic post-permutation module chat employs a series of one or more configurable 
multiplexors at the end of the hardware state machine 718 (see paragraphs [0070]-[0074] - page 16, 
line 26-page 1 8, line 24; FIG. 7). 

VI. GROUNDS OF REJECTION TO BE REVIEWED ON APPEAL 

Claims 12, 13, 27, 28, 42, 43, S7, and 58 stand rejected under 35 U.S.C. §112, first paragraph, 
as failing to comply with the enablement requirement. 

Claims 12, 13, 27, 28, 42, 43, 57, and 58 stand rejected under 35 U.S.C. §112, second 
paragraph, as being incomplete for omitting essential structural cooperative relationships of 
elements, such omission amounting to a gap between the necessary structural connections. 

VII. ARGUMENTS 

A. Claims 1 2, 1 3, 27, 28, 42, 43, 57, and 58 Are Enabled in Accordance with 35 U.S.C. §112, 
First Paragraph. 

In the final Office Action, claims 12, 13, 27, 28, 42, 43, 57, and 38 were rejected under 35 
U.S.C. §1 1 2, first paragraph, as failing to comply with the enablement requirement 

More specifically, the claims were rejected stating that while the specification suggests the 
use of multiplexors with the hardware state machine, nowhere is it described in the manner in which 
the multiplexors are actually used or configured. 

In the prior response, Appellants referred the Examiner to paragraphs [0070][0074J: 

[0070) The hardware state machine 718 may contain die same logic as used in the 
prior art and may not be modified. In addition to the state machine 718, the 
implementation consists of a permutation that employs a series of configurable 
multiplexors at the beginning 716 and end 720 of the fixed hardware state machine 
71 8. Custom logic (i.e. % the logic within hardware configuration control and IO 
module 714) interconnects the multiplexors (within permutations 716 and 720) to 
. the system bus 612 of CAM 51 2. Accordingly, the hardware configuration control 
and IO module 714 rhat connects to the system bus 612 controls access to the 
permutation 716 and 720 and state machine 718 logic. 

[0071] The custom logic within the control and IO module 714 implements a key 
exchange protocol by accepting (ot rejecting) a series of pre-authorized keys (e.g., 
sequentially wrapped keys with n=10° times or other large value) or other secure 
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protocol The key defines a configuration for the permurations 716 and 720. Valid 
keys arc only known to the headend (e.g., uplink center 104) by using any public key 
algorithm such as Rabin or RSA (Rivcst-Shamir-Adelman). Based on a public key 
algorithm, the keys cannot be recreated or generated by unknown parties. The keys 
are delivered to the smart card either over the broadcast stream, Internet, or other 
appropriate distribution channel. The keys can be delivered to the smart card (i.e,, 
CAM 512) population asynchronously (e.g ? , over a period of several hours, days, or 
monrhs). The keys may be delivered using uniquely encrypted, group encrypted 
packers. These packets are unintelligible to members (i.e M CAMs 512) for which they 
were not encrypted. In other words, the packets are only intelligible to those 
members/control and IO modules 714 having the appropriate private key. 
[0072] ITie hardware configuration control and IO module 714 
verifies/authenticates the key. Such a verification/authentication may ensure that 
the key is from a known source (e.g., a known uplink center 104, program source 
200A-200C,etc), that the key is not a duplicate of an already received key, or that the 
key fails to comply with an additional security measure. As part of the authentication 
process, the control and IO module 714 decrypts the keys. The decrypted key is then 
verified/authenticated by the custom logic within module 714. If the key is valid, the 
key is retained by the control and IO module 714 (e.g., by storing the keys in 
protected registers with no physical or logical output mechanism outside the custom 
logic within the module 71 4). If die key is invalid, the key is rejected and may not be 
stored by the control and IO module 714. 

[0073] As described above, the key defines a configuration for the permutations 
716 and 720. Accordingly, when appropriate, the key is used to dynamically (Le., on- 
the-fly) reconfigure the permutations 716 and 720. The timing of the 
reconfiguration may occur immediately upon receipt of the key. Alternatively, the 
key may be stored by control and IO module 714 and only used to reconfigure the 
permutations 716 and 720 (e.g. s switch the configuration to that represented by the 
stored key) upon receipt of an over the air command. In such a circumstance, the 
control and IO module 714 may store a currently active key (that defines a 
permutation 716 and 720 currently being used) and a future key. Accordingly, the 
keys may be delivered asynchronously over a very long period of time to multiple 
CAMs 512 where they arc validated and stored asynchronously. Thereafter (e.g., 
once a period of time has passed to ensure that appropriate/enough CAMs 512 have 
the new key), an over die air command to activate a reconfiguration operation for a 
key may be delivered synchronously to all CAMs 512. Thus, the actual 
reconfiguration operation may occur simultaneously within all CAMs 512, while the 
key delivery and validation mechanism is asynchronous over a period of time. 
[0074] To recongifure the permutations, 716 and 720, the control and IO module 
714 communicates bi-direcdy 722 with the pre-permutations 716 and post- 
permutations 720 to dynamically configure the series of multiplexors in each 
respective permutation 71 6 and 720. Once configured, the pre-permutations 716 
place the digital services information received across communication link 724 from 
control and IO module 714 into the appropriate form for use by the hardware state 
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machine 718. Hardware state machine 718 may modify the digital services 
information based on custom logic within the state machine 718. Thereafter, the 
post-permurations 720 may modify the outgoing digital services information to limit 
use and viewing of the information from unauthorized attackers. 

As can be seen, such paragraphs clearly provide that the key is used to configure the series of 
multiplexors within each permutation. The claims provide for using a series of configurable 
multiplexors based on the key. Since the multiplexors are configurable, the key may be used to 
dynamically configure the various components of the invention. Further, contrary to that asserted in 
die final Office Action, such a use clearly establishes how the multiplexors arc used. 

In addition, Appellants previously provided a standard dictionary definition for a multiplexor 
that described a rearrangement of elements of a set. Such a definition was merely ignored in the 
final Office Action. Appellants further referred to another definition from wikipedia - 
"http:en.wikipedia.org/wiki/Dcmultiplexor" to further evidence die state of the art of multiplexors 
and demultiplexers. 1 Tie definition provides "It is usual to combine a multiplexor and a 
dcmultiplexor together into one piece of equipment and simply refer to the whole thing as a 
'multiplexor 5 . Based on such a definition, it is clearly that a multiplexor (that includes both a : 
multiplexor and demultiplex or) can easily be configured to have inputs and outputs that merely 
permute the data. Nonetheless, the claims do not require an identical number of inputs and outputs 
as suggested by the Examiner. Instead, the pre-permutation module merely employs a series of 
configurable multiplexors while the post-permutation module also employs a series of configurable 
multiplexors. Such a teaching is completely clearly establishes sufficient support to practice the 
claimed invention. 

In addition, Appellants submit that the use of configurable multiplexers are known in the art. 
For example, U.S. Parent No. 5,867,644 by Ranson describes the existence of configurable 
multiplexors and how such user configurable multiplexer circuitry can be used (See Abstract). Thus, 
the recitation in the present invention that describes the use of the key to configure the multiplexors 
in combination with the known use of configurable multiplexors clearly enables the practice of the 
invention. In addition, the invention provides unique features and advantages over that of the prior 
art. 
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The Advisory Action asserts that the specification paragraph 70 airnply states that the 
invention connects multiplexers using custom logic. Appellants respectfully disagree and traverse 
such an assertion- Paragraph 70 is recited above and provides that a permutation employs a series of 
configurable multiplexors, h'urther, contrary to that asserted in the Office Action, paragraph 70 
states that the cuscom logic interconnects the configurable multiplexors to the system bus of the 
CAM. Again, the custom logic utilizes these configurable multiplexors at the beginning and end of 
the hardware state machine. Further, the above paragraphs specify that a key is used to define the 
configuration for the multiplexors. The above paragraphs 70-74 provide and describe explicitly how 
the multiplexors arc used in the invention and in fact provide enabling support under 35 U-S.C 1 12. 

In response to the above arguments, the Advisory Action mailed on October 27, 2006 
provides: 

In reciting the definition from Wikipedia, Applicant has not entered the 
citation into the record. As previously stated, Applicant's arguments do not refute 
the case mat Applicant's specification simply states that the invention connects 
multiplexers using "custom logic" (see paragraph 70), without suggesting what that 
logic is. Ihere exist many designs for pcrmutors that arc well-known in the art- For 
any digital logic design, there exists a large number of alternative designs, using 
different types of gates, that would produce the same set of outputs from the same 
respective inputs. It is therefore reasonable to conclude that it would be possible, 
given an arrangement of a number of multiplexers, to derive an output that is a 
rearrangement of an input. It would nor, however, be clear to one of ordinary skill 
in the art (i.e., a journeyman digital logic designer) how to implement such a 
functionality without having to perforin undue experimentation- Applicant's 
reference ro U.S. Patent No. 5,867,644 is not persuasive in that the multiplexers (see 
figures 45 and 46 and columns 28 and 29) are being used for a purpose (the 
configuration of a circuit test bed) that does not appear to be applicable to the non- 
detenninistic permuting of data between a cryptographic I/O controller and a state 
machine as in Applicant's invention. 

Appellants respectfully disagtec with and traverse the above assertions. As can be seen from 
die above, the Examiner is asserting that a journeyman in the art would nor know how to merely 
rearrange inputs into different outputs using multiplexers without undue experimentation. Such an 
assertion is wholly without merit. Nonetheless, regardless of the merit of such an assertion, 
Appellants note that such a permutation or rearrangement is not what is required by the claims. 
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In the prior response (as described above), Appellants addressed the enablement aspects of 
the invention with respect to the use of multiplexors. In addition, as stated above, Appellants 
directed the attention of the Examiner to multiple different definitions of a multiplexor from various 
sources. Such definitions were not needed nor used to establish the prior art. Accordingly, there 
was no need to enrer the citation into the record. Rather, the definitions were merely used to 
indicate ro the Examiner that the use of a multiplexor was in contrast to the definition used and 
asserted by the Examiner in this matter. Further, the definitions were used to establish that 
multiplexors in general are known in the art and their use need not be described in specific detail in a 
specification in order to enable the invention. Accordingly, Appellants have clearly established the 
existence and use of configurable multiplexors. 

It is the Examiner's obligation to set forth a prima facie rejection, 'llie Examiner has failed 
to establish that the use of multiplexors in the manner claimed are not enabled by the specification. 

In the Advisory Action, the Examiner asserts: 

Applicant's arguments do not refute the case that Applicant's specification simply 
states that the invention connects multiplexers using 'custom logic* (see paragraph 
70), without suggesting what that logic is. 

Appellants respectfully disagree and traverse such an assertion. Appellants have referred 
multiple times to paragraphs [0070]-[0074] of the specification which clearly establish and describe 
how multiplexors are used. Paragraph [0071] describes the custom logic that utilizes a key that 
defines a configuration for permutations. Paragraphs f0072]-[0074] further describe such 
permutations. Again, as stated in the previously submitted arguments, the present claims do not 
recite not specify that the same number of inputs or outputs are used. Instead, the claims provide 
for using a series of configurable multiplexors based on the key. Since the multiplexors are 
configurable, the key may be used to dynamically configure the various components of the 
invention. Such a use clearly esrablishes a how the multiplexors relate to the invention and how they 
arc used. 

In rejecting the claims, the Examiner is ignoring these paragraphs (i.e., paragraphs [0070]- 
|0074]) from the specification thereby establishing an omission of an essential element needed for a 
prima facie rejection under 35 U.S.C. §1 12 and resulting in clear error in the rejection. 
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In addition, the Examine* has indicated that U.S. Patent No. 5,867,644 is used for a different 
purpose from that of the present invention and therefore cannot be used to provide enabling 
support. Appellants note that the '644 reference was merely provided to make clear to the Examiner 
that configurable multiplexors are known in the art. The particular manner in which a multiplexor is 
configured is set forth in the present invention and claims. Accordingly, the end ust for which the 
Kxaminer is relying has no relevance with respect to the present invention. Further, for 112 
support, the field of invention is not particularly relevant. In this regard, the standard for 
determining whether an invention is enabled is whether the experimentation needed to practice the 
invention is undue or unreasonable (see MPEP 2164). Here, any person of ordinary skill in the art 
would knew that multiplexors can be configurable. Accordingly, to argue that multiplexors cannot 
be configurable is wholly without merit and ignoring the clear standards set forth in the case law and 
MPEP. 

Again, the specificadon clearly establishes and describes how multiplexor* are connected and 
used. Namely, a permutation (which is defined using a key) employs a series of configurable 
multiplexors. The configurable multiplexors are used at the beginning and end of a hardware state 
machine. Again, the specification explicitly describes that a key is used to define the configuration 
for the muldplexors. 

Such a citation and description in the specification clearly provides sufficient support under 
35 U.S.C. §112. To fail to consider such a teaching establishes clear error in the Examiner's 
rejection and fails to consider an essential element needed for a 1 12 baaed rejection. 

In view of the above, Appellants respectfully request that the rejections under 35 U.S.C. 112 
be reversed and direct the Examiner to allow the claims. 

B. Claims 12, 13, 27, 28, 42, 43, 57, and 58 Are Not Incomplete Under 35 U-S.C §112, 
Second Paragraph. 

In the final Office Action, claims 12, 13, 27, 28, 42, 43, 57, and 58 were rejected under 35 
U.S.C. §112, second paragraph, as being incomplete for omitting essential structural cooperative 
relationships of elements, such omission amounting to a gap between the necessary structural 
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connections. More specifically, the rejection scares that it is unclear how the multiplexors relate to 
the remainder of the invention. 

*l"he claims clearly recite that the custom logic block of the independent claims comprises 
cither a prc-permutation module or a post-permutation module that employs a series of configurable 
multiplexors at the beginning or end of the hardware state machine of the custom logic block. 

As described above, Appellants direct the attention of rhe Board to paragraphs [0070H0074] 
of the specification as filed (recited above). As can be seen, such paragraphs dearly provide that the 
key is used to configure the series of multiplexors within each permutation. The claims do not recite 
nor specify that the same number of inputs or outputs are used. Instead, the claims provide for 
using a series of configurable multiplexors based on the key. Since the multiplexors are 
configurable, the key may be used to dynamically configure the various components of the 
invention. 

Thus, the mutliplexors are clearly claimed as part of the custom logic block that are used at 
the beginning or end of the hardware state machine within such a custom logic block. Such a use 
clearly establishes how the multiplexors relate to the invention. Accordingly, there are insufficient 
grounds to maintain a rejection under 35 U.S.C. §112, second paragraph. 

Appellants further note that the rejection recites MPEP §2172.01 which provides: 

A claim which omits matter disclosed to be essential to the invention as 
described in the specification or in other statements of record may be rejected under 
35 U.S.C. 112 . first paragraph, as not enabling, h nr Maybtw, 527 F-2d 1229, 188 
USPQ 356 (CCPA 1976). See also MPEP § 21 64.08 fcV Such essential matter may 
include missing elements, steps or necessary structural cooperative relationships of 
elements described by the applicants) as necessary to practice the invention. 

In addition, a claim which fails to interrelate essential elements of the 
invention as defined by applicant(s) in the specification may be rejected under 35 
U.S.C. 112 . second paragraph, for failure to point out and distinctly claim the 
invention. Sec In n Venetfa, 530 F,2d 956, 18£ USPQ 149 (CCPA 1976); In n Collier, 
397 F.2d 1003, 158 USPQ 266 (CCPA 1968). >But see Ex parte NoMen, 149 USPQ 
378, 380 (Bd. Pat App. 1965) ( M [I]t is not essential to a patentable combination that 
there be interdependency between the elements of the claimed device or that all the 
elements operate concurrendy toward the desired result"); Ex parte Hubtr> 148 USPQ 
447, 448-49 (Bd. Pat App. 1965) (A ckim does not necessarily fail to comply with 35 
U.S.C 112, second paragraph where the various elements do not function 
simultaneously, are not directly functionally related, do not directly intercooperatc, 
and/or serve independent purposes.). 
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In view of the above cited portion of the MPEP, the omitted structural elements must be 
essential to the invention in order to maintain the 112, second paragraph rejection- Appellants 
submit that the dependent claims do not omit any such essential elements. In this regard, the claims 
specify that configurable multiplexors arc placed at the beginning or end of the hardware state 
machine. As described in section A above, such elements are clearly enabled by the specification. 
Further, there are no essential elements that axe missing, nor are necessary structural cooperative 
relationships of the multiplexor use lacking. 

Accordingly, Appellants respectfully request reversal of the rejections and further request 
that the Board direct the Examiner to allow the rejected claims. 

CONCLUSION 

In light of rhe above arguments, Appellants respectfully submit that the cited references do 
not anticipate nor render obvious the claimed invention. Further, all of the claims are in compliance 
with and fully enable the invention under 35 U.S.C §112, first paragraph. As a result, a decision by 
the Board of Patent Appeals and Interferences reversing the Examiner and directing allowance of 
the pending claims in the subject application is respectfully solicited. 

Respectfully submitted, 

Attorneys for Appellants) 

Date: January 5. 2007 

The DIRECTV Group, inc. 
CA/LA1/A109 
2230 K- Imperial Highway 
P.O. Box 956 
lil Scgundo CA 90245 

Telephone No. (3 10). 964-461 5 
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VIII. CLAIMS APPENDIX 

1 . (CURRENTLY AMENDED) A system for controlling access to digital services 
comprising: 

(a) a control center configured to coordinate and provide digital services; 

(b) an uplink center configured to receive the digital services from the control center and 
transmit the digital services to a satellite; 

(c) the satellite configured co: 

(i) receive the digital services from the uplink center; 

(ii) process the digital services; and 

(iii) transmit die digital services and configuration information for accessing the 
digital services to a subscriber receiver station; 

(d) the subscriber receiver station configured to: 

(i) receive the digital services and configuration information from the satellite; 

(ii) control access to the digital services through an integrated receiver/ decoder 

(IRD); 

(c) a conditional access module (CAM) communicatively coupled to the (IRD) S wherein 
the CAM is configured to receive the configuration information, and wherein the configuration 
information has been transmitted asynchronously; and 

(f) a custom logic block within the CAM, wherein the custom logic block is configured to 
dynamically reconfigure a hardware state machine in the CAM based on the configuration information, 
wherein the hardware state machine comprises custom logic that is used to control access to the digital 
services and wherein the hardware state machine is nor directly accessible to a system inpuc/output 
module or system bus of the CAM, and wherein the custom logic block comprises a dedicated 
hardware reconfiguration and input/output module that connects the hardware state machine to a 
system bus of the CAM and controls access to logic of the hardware state machine. 

2. (ORIGINAL) The system of claim 1 wherein the CAM comprises a smart card. 

3. (ORIGINAL) *lhe system of claim 1 wherein the configuration information is 
encrypted. 
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4. (ORIGINAL) The system of claim 3 wherein the configuration information is 
encrypted through a key exchange protocol 

5. (ORIGINAL) The system of claim 4 wherein the key exchange protocol comprises a 
public key algorithm. 

6- (ORIGINAL) The system of claim 3 wherein the configuration information is received 
in uniquely encrypted, group encrypted packets. 

7. (ORIGINAL) The system of claim 3 wherein the custom logic block is further 
configured to: 

decrypt the configuration information; and 

store the configuration information in one or more protected registers. 

8. (ORIGINAL) The system of claim 1 wherein the custom logic block is further 
configured to verify that the configuration information is authentic, 

9. (ORIGINAL) The system of claim 8 wherein the custom logic block is further 
configured to retain the configuration information if the configuration information is authentic. 

10. (ORIGINAL) The system of claim 1 wherein the custom logic block is further 
configured to receive a synchronous command to reconfigure the hardware state machine using the 
configuration information. 

11. (CANCELLED) 

1 2. (ORIGINAL) The system of claim 1 wherein the custom logic block comprises an 
asynchronous dynamic pre-pcrmutation module that employs a series of one or more configurable 
multiplexors at the beginning of the hardware state machine. 

1 3. (ORIGINAL) The system of claim 1 wherein the custom logic block comprises an 
asynchronous dynamic post-permutation module that employs a series of one or more configurable 
multiplexors at the end of the hardware state machine. 
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15. 



(CANCELLED) 

(CURJiEN'Tl.Y AMENDED) A method for providing access to digital services 




receiving configuration information in a security component comprising a smart card, 



wherein; 



(1) the configuration information has been transmitted asynchronously; and 

(2) the security component is configured to control access to the digital services; 



and 



(b) dynamically reconfiguring a hardware state machine in die security component based 
on the configuration information, wherein the hardware state machine comprises custom logic that is 
used to control access to the digital services, and wherein a component of the hardware state machine is 



not dirccdy accessible to a system input/output module or system bus of the security component, and 
wherein the custom logic comprises a dedicated hardware reconfiguration and input/ output module 
that connects the hardware state machine to a system bus of the CAM and controls access to logic of 
the hardware state machine. 



16. (CANCELLED) 

1 7. (PREVIOUSLY PRESENTED) The method of claim 1 5 wherein the configuration 



18. (ORIGINAL). The method of claim 1 5 wherein the configuration information is 
encrypted. 

1 9. (ORIGINAL) 'lie method of claim 1 8 wherein the configuration information Ls 
encrypted dirough a key exchange protocol 

20. (ORIGINAL) The method of claim 19 wherein the key exchange protocol comprises a 
public key algorithm. 

21. (ORIGINA L) The method of claim 1 8 wherein the configuration information is 
received in uniquely encrypted, group encrypted packets. 



information is received through a broadcast scream, Internet, or callback. 
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22. (ORIGINAL) The method of claim 18 further comprising; 
decrypting the configuration information; and 

storing che configuration information in one or more protected registers. 

23. (ORIGINAL) The method of claim 15 further comprising verifying the configuration 
information is authentic. 

24. (ORIGINAL) The method of claim 23 further comprising retaining the configuration 
information if the configuration information is authentic. 

25. (ORIGINAL) The method of claim 15 further comprising receiving a synchronous 
command to reconfigure the hardware state machine using the configuration information. 

26. (CANCELLED) 

27. (ORIGINAL) The method of claim 1 5 wherein the dynamic reconfiguration of the 
hardware state machine reconfigures a permutation that employs a series of one or more configurable 
multiplexors at the beginning of the hardware state machine. 

28. (ORIGINAL) The method of claim 15 wherein the dynamic reconfiguration of the 
hardware state machine reconfigures a permutation that employs a series of one or more configurable 
multiplexors at the end of the hardware state machine. 

29. (CANCELLED) 

30. (CURRENT! ,Y AMENDED) A system for providing access to digital services 
comprising: 

(a) a conditional access module (CAM) configured to receive configuration information for 
accessing the digital services, wherein the configuration information has been transmitted 
asynchronously; and 

(b) a custom logic block configured to dynamically reconfigure a hardware state machine in 
die CAM based on the configuration information, wherein the hardware state machine comprises 
custom logic that is used to control access to the digital services, and wherein a component of the 
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hardware state machine is not directly accessible to a system input/ouiput module ox system bus of the 
CAM, and wherein the cuscom logic block comprises a dedicated hardware reconfiguration and 
inpur/output module that connects the hardware state machine to a system bus of the CAM and 
controls access to logic of the hardware state maehinc. 

31. (ORIGINAL) Ihe syscem of claim 30 wherein the CAM comprises a smart card. 

32. (PREVIOUSLY PRESENTED) The system of claim 30 wherein the configuration 
information is received through a broadcast stream, Internet, or callback. 

33. (ORIGINAL) The system of claim 30 wherein the configuration information is 
encrypted. 

34. (ORIGINAL). The system of claim 33 wherein the configuration information is 
oncrypred through a key exchange protocol. 

35. (ORIGINAL) The system of claim 34 wherein the key exchange protocol comprises a 
public key algorithm. 

36. (ORIGIN AL) Ihe system of claim 33 wherein the configuration information is 
received in uniquely encrypted, group encrypted packets. 

37. (ORIGINAL) The system of claim 33 wherein the custom logic block is further 
configured to: 

decrypt the configuration information; and 

store the configuration information in one or more protecccd registers. 

38. (ORIGINAL) The system of claim 30 wherein the custom logic block is further 
configured to verify that the configuradon information is authentic 

39. (ORIGINAL) 'lhe system of claim 38 wherein the custom logic block is further 
configured to retain the configuration information if the configuradon informanon is authentic, 
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40. (ORIGINAL) The system of claim 30 wherein the custom logic block is further 
configured co receive a synchronous command to reconfigure the hardware state machine using the 
configuration information. 

41. (CANCELLED) 

42. (ORIGINAL) The system of claim 30 wherein the custom logic block comprises an 
asynchronous dynamic p re-permutation module that employs a series of one or more configurable 
multiplexors at the beginning of the hardware state machine. 

43. (ORIGINAL) Hie system of claim 30 wherein the custom logic block comprises an 
asynchronous dynamic post-permutation module that employs a series of one or more configurable 
multiplexors at the end of the hardware state machine. 

44. (CANCKIJ.KD) 

45. (CURRENTLY AMENDED) An article of manufacture for providing access to digital 
services comprising; 

(a) means for receiving configuration information in a security component comprising a 
smart card, wherein: 

(1) the configuration information has been transmitted asynchronously; and 

(2) the security component is configured to control access to the digital services; 

and 

(b) means for dynamically reconfiguring a hardware state machine in the security 
component based on the configuration information, wherein the hardware state machine comprises 
custom logic that is used to control access to the digital services, and wherein a component of the 
hardware state machine is not directly accessible to a system input/output module or system bus of the 
security component, and wherein the custom logic comprises a dedicated hardware reconfiguration and 
input/output module that connects the hardware state machine to a system bus of the CAM and 
controls accesH to logic of the hardware state machine. 

46. (CANCELLED) 
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47. (PREVIOUSLY PRESENTED) The anicle of manufacture of claim 45 wherein the 
configuration information is received through a broadcast stream, Internet, or callback. 

48. (ORIGINAL) The article of manufacture of claim 45 wherein die configuration 
information is encrypted. 

49. (ORIGINAL) The article of manufacture of claim 48 wherein the configuration 
information is encrypted through a key exchange protocol. 

50. (ORIGINAL) The article of manufacture of claim 49 wherein the key exchange 
protocol comprises a public key algorithm. 

51 . (ORIGINAL) The article of mahufactute of claim 48 wherein the configuration 
information is received in uniquely encrypted, group encrypted packets. 

52. (ORIGINAL) The article of manufacture of claim 48 further comprising: 
means for decrypting the configuration information; and 

means for storing the configuration information in one or more protected registers. 

53. (ORIGINAL) The article of manufacture of claim 45 further comprising means for 
verifying the configuration information is authentic 

54. (ORIGINAL) The article of manufacture of claim 53 further comprising means for 
retaining the configuration information if the configuration information is authentic. 

55. (ORIC1NAJ -) The article of manufacture of claim 45 further comprising means for 
receiving a synchronous command to reconfigure the hardware state machine using the configuration 
information. 

56. (CANCFJJJRD) 
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57. (ORIGINAL) The article of manufacture of claim 45 wherein the dynamic 
reconfiguration of the hardware state machine reconfigures a permutation that employs a series of one 
or more configurable multiplexors at the beginning of the hardware state machine. 

58. (ORIGINAL) The article of manufacture of claim 45 wherein the dynamic 
reconfiguration of the hardware state machine reconfigures a permutation that employs a series of one 
or more configurable multiplexors at the end of the hardware s tate machine. 

59. (CANCELLED) 
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IX. EVIDENCE APPENDIX 



None. 
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X. RELATED PROCEEDINGS APPENDIX 



None. 
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